Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a3a2f33342d3334203d3e20323639323630.roa
File:                     323830343a363164383a3a2f33342d3334203d3e20323639323630.roa (raw, json)
Hash identifier:          YwC95DrXSUSAcxueTrVW3vlfp5qUpB/qKkbWa1GBg1Y=
Subject key identifier:   49:73:EA:D7:24:25:A2:57:61:8E:3E:73:EC:0C:40:A0:E0:52:16:41
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       3F466C5139D732DBBEAC436B7C50DB8446C3D3C0
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a3a2f33342d3334203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 15:00:46 +0000
ROA not before:           Sun 02 Jun 2024 14:55:46 +0000
ROA not after:            Sun 01 Jun 2025 15:00:46 +0000
asID:                     269260
IP address blocks:        2804:61d8::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:46:6c:51:39:d7:32:db:be:ac:43:6b:7c:50:db:84:46:c3:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:55:46 2024 GMT
            Not After : Jun  1 15:00:46 2025 GMT
        Subject: CN=4973EAD72425A257618E3E73EC0C40A0E0521641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:b1:2b:7e:34:78:8a:d6:a1:73:ee:c8:13:
                    25:47:aa:2e:d9:3b:3d:81:b6:59:b2:80:d6:65:94:
                    65:32:77:9b:ea:99:7e:8c:39:08:e0:bd:53:08:0d:
                    27:ed:8d:d1:be:30:fe:25:fe:ce:82:58:9a:dc:2d:
                    3f:90:8d:65:99:6a:e3:ef:82:2f:5b:90:39:87:4a:
                    a6:dc:f9:2d:63:8c:57:35:6b:37:2b:dc:0a:dd:4d:
                    c7:65:f0:61:4c:71:09:cb:a5:2d:de:71:3a:8a:c4:
                    00:08:58:ef:33:fd:40:30:5f:4f:03:ea:95:b0:9f:
                    c5:28:9d:45:21:76:86:c7:72:8c:3c:2b:e3:18:64:
                    16:2e:ff:91:67:d0:41:d6:c8:32:85:31:13:34:db:
                    d5:b4:88:a0:b1:71:b4:f2:1e:c6:9d:da:49:11:1a:
                    93:68:67:84:f5:17:83:ba:06:45:2f:36:ab:66:43:
                    32:3f:c6:30:f1:ac:6c:10:51:af:85:15:7e:3e:de:
                    c7:c1:d0:41:67:d4:d3:7c:7a:51:30:02:7a:ac:26:
                    f3:d3:84:b4:b9:54:df:ed:4d:47:74:71:b0:a2:2f:
                    8d:cf:60:24:22:97:8b:ca:f0:17:e1:aa:00:1f:0c:
                    df:a3:05:9b:13:84:3a:39:7b:6e:d5:94:6d:b6:e6:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:73:EA:D7:24:25:A2:57:61:8E:3E:73:EC:0C:40:A0:E0:52:16:41
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a3a2f33342d3334203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61d8::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:d0:17:a2:72:c0:9e:a0:5b:42:3a:1b:ba:47:a2:8d:b6:9e:
         fc:5a:27:75:b1:86:42:e0:0d:54:f2:a1:73:22:cf:98:b9:90:
         19:47:6a:3d:91:04:1c:ee:58:87:c4:39:aa:21:60:78:9e:b7:
         25:8f:dc:c9:a5:5c:0f:c6:b7:3a:f3:31:db:2a:06:58:33:ce:
         c2:8c:47:5f:84:05:13:82:c1:40:92:ad:20:0d:9f:68:c7:b4:
         85:a3:0e:bb:91:14:26:a3:a4:ce:94:01:5a:a9:8b:72:f3:02:
         4d:b9:d9:0d:86:b0:4e:ae:49:5b:91:26:eb:d8:f3:23:df:b8:
         61:6f:47:07:69:81:a6:6b:c8:7e:ae:de:30:a9:22:21:9d:e5:
         6c:77:a8:4e:f9:37:da:ec:2b:9b:77:52:68:0f:ac:21:0d:37:
         5b:c9:28:e8:d4:df:db:32:f3:a1:9f:1d:ee:c3:bb:bb:3b:15:
         03:39:45:0a:86:e3:b9:38:b3:14:67:1c:c2:6d:5b:00:99:0e:
         93:c1:ad:62:bc:6e:4b:33:5e:2a:cc:b3:fd:09:1a:a8:f3:fb:
         2e:fd:59:83:ec:3b:db:53:d2:26:b8:4a:be:32:9d:89:e1:b9:
         b4:93:d4:39:f7:1d:26:d8:ef:f2:3e:8d:9c:91:be:4c:5f:8d:
         c5:47:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----